General
- Target 2026-08-21_47ae29549b74da247893361e742322e8_elex_wannacry
- Size 55KB
- Sample260821-w61b8sch58
- SHA256 3029e3bc14baf7c67c0d4de16893dc408e3bc1c9ce04dbcaed4e016cbdaaed03
Score
7/10
Malware Config
Targets
-
- Target 2026-08-21_47ae29549b74da247893361e742322e8_elex_wannacry
- Size 55KB
- SHA256 3029e3bc14baf7c67c0d4de16893dc408e3bc1c9ce04dbcaed4e016cbdaaed03
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1